Analyze codebase changes for security vulnerabilities, compliance, and failure modes.
npx skills add https://github.com/lengo0951/pms --skill ck-code-review-lengo0951
Please help me install this Agent Skill. Skill: ck:code-review Source: https://github.com/lengo0951/pms/tree/main/.claude/skills/code-review Command: npx skills add https://github.com/lengo0951/pms --skill ck-code-review-lengo0951
This Skill addresses the need for rigorous code reviews, focusing on security, quality, and efficiency. It automates the review process, identifies potential issues, and promotes best practices.
Use the ck:code-review skill to review the latest changes in the 'main' branch.
High-intent search queries and answers about installing and using this skill.
To perform an adversarial code review on a pull request, you need a tool that actively attempts to break the code to uncover security holes and failure modes. This Skill analyzes PR changes for vulnerabilities, technical compliance, and quality principles like YAGNI, KISS, and DRY.
Automating security vulnerability scanning for pending changes requires analyzing the codebase against failure modes and compliance standards. This Skill reviews pending changes and commits through an adversarial process to identify security holes before merging.
Yes, you can review full codebase changes in parallel for technical compliance. The Skill supports parallel audits and full codebase scans to ensure code quality and security across the entire repository.
Yes, you need git and gh installed along with a code-reviewer tool to automate code reviews. The Skill requires access to your codebase and these specific dependencies to analyze changes and perform adversarial audits.
Automated code review works with commit history in addition to pull requests. The Skill supports multiple input modes including commits, pending changes, and full codebase scans to identify security vulnerabilities and ensure technical rigor.
Adversarial review actively attempts to break the code to uncover hidden security vulnerabilities and failure modes, unlike standard checks. It enforces technical rigor by adhering to YAGNI, KISS, and DRY principles while ensuring spec compliance.
KarlinskySConfigure GitHub authentication via HTTPS tokens, SSH keys, or gh CLI login.
ZateGenerate structured security audit reports with findings, severity, and ASVS mappings.
leonardoteodorooConfigure Semgrep, SonarQube, and CodeQL for CI/CD security scanning.
baphledRun linting, formatting, security scans, and tests before committing code.
